Skip to contentMediawiki vulnerabilities
Newest
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1...CVE-2014-9475Fix available3.5 Low
- mediawikiThe wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through...CVE-2014-9277Fix available7.5 High
- mediawikiCross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in...CVE-2014-92765.1 Medium
- mediawikiThe (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x...CVE-2014-7295Fix available3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and...CVE-2014-7199Fix available4.3 Medium
- mediawikiMediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not...CVE-2014-5243Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22...CVE-2014-52424.3 Medium
- mediawikiThe JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through...CVE-2014-5241Fix available6.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1...CVE-2014-3966Fix available2.6 Low
- mediawikimaintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary...CVE-2013-18185.0 Medium
- mediawikiSession fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x...CVE-2012-53956.8 Medium
- mediawikiSession fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1...CVE-2012-5391Fix available6.8 Medium
- mediawikiMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) CreateProperty, (2)...CVE-2014-34556.8 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in Special:CreateCategory in the SemanticForms...CVE-2014-34546.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1...CVE-2013-45744.3 Medium
- mediawikiBuffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x...CVE-2013-45717.5 High
- mediawikiThe zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki...CVE-2013-45705.0 Medium
- mediawikiCross-site scripting vulnerability in includes/actions/InfoAction.phpCVE-2014-2853Fix available4.3 Medium
- mediawikiincludes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before...CVE-2014-2665Fix available4.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...CVE-2013-6454Fix available4.3 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to...CVE-2013-6472Fix available5.0 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize...CVE-2013-6453Fix available7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...CVE-2013-6452Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4,...CVE-2013-6451Fix available6.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase...CVE-2014-22444.3 Medium
- mediawikiincludes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before...CVE-2014-2243Fix available5.8 Medium
- mediawikiincludes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and...CVE-2014-2242Fix available4.3 Medium
- mediawikiMediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF...CVE-2014-1610Public exploitFix availableEPSS 42.8%6.0 Medium
- brion vibber centralauth extension, mediawiki +1 moreThe CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x...CVE-2013-43047.5 High
- mediawikiThe CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1...CVE-2013-45694.3 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before...CVE-2012-53946.8 Medium
- mediawiki, fedoraproject fedora +1 moreThe CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before...CVE-2013-4572Fix available7.5 High
- mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4568Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4567Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1...CVE-2013-45734.3 Medium
- mediawiki, fedoraproject fedora, gentoo linux +2 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password...CVE-2013-2032Fix available5.0 Medium
- mediawiki, gentoo linux +1 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site...CVE-2013-2031Fix available4.3 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser...CVE-2013-43066.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi...CVE-2013-43054.3 Medium
- mediawikiincludes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4303Fix available6.1 Medium
- mediawikiincludes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4301Fix available5.0 Medium
- mediawiki(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5)...CVE-2013-4302Fix available5.0 Medium
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the...CVE-2013-43074.3 Medium
- mediawikiUnrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6...CVE-2013-2114Fix available6.8 Medium
- mediawiki rssreaderCross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki...CVE-2012-6453Fix available4.3 Medium
- mediawikiThe wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote...CVE-2012-4885Fix available5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3...CVE-2012-1582Fix available4.3 Medium
- mediawikiMediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password...CVE-2012-1581Fix available5.0 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17...CVE-2012-15806.8 Medium
- mediawikiThe resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private...CVE-2012-15795.0 Medium
- Show moreLoading…